Security Specialist – Infrastructure Management (L2 Cybersecurity Engineer)

Job Summary

We are searching for a proficient Security Specialist focusing on Infrastructure Management at Level 2 to support our enterprise cybersecurity framework. This opportunity is based in Riyadh, Saudi Arabia, and requires an individual skilled in managing escalated security incidents, ensuring system availability, and supporting compliance within a secure enterprise environment.

Main Duties

• Address escalated issues from Level 1 teams regarding security events, system performance drops, and infrastructure complications.
• Diagnose and resolve matters related to firewalls, VPN connections, NAT, network routing, session management, and device connectivity.
• Oversee the functionality, availability, and health of cybersecurity infrastructure components.
• Execute authorized firewall rules, security setups, and approved infrastructure modifications.
• Apply software patches, firmware revisions, and maintenance upgrades adhering strictly to change management protocols.
• Examine security logs, network traffic, incident patterns to identify causes and suggest improvements.
• Lead incident resolution activities for critical (Priority 1 and 2) cases within set service agreements.
• Collaborate with OEM vendors and advanced support teams for complex troubleshooting needs.
• Perform Root Cause Analyses and propose strategies to avert repeated incidents.
• Contribute to security hardening efforts, conduct configuration audits, and enforce compliance standards.
• Maintain comprehensive technical documentation including SOPs, method procedures, knowledge bases, and error logs.
• Assist with internal audits, compliance tracking, and governance reviews.
• Coach Level 1 engineers, facilitate knowledge transfer, and identify automation or process enhancement opportunities.

Qualifications and Experience

• Between 3 to 6+ years in Security Operations, Firewall Management, or Network Security support roles.
• Robust experience with enterprise-grade security infrastructure and network defense technologies.
• Skill in troubleshooting VPNs, firewall policies, NAT, and routing operations.
• Familiarity with incident, problem, and change management frameworks, preferably ITIL.
• Proven ability to handle controlled security change implementations and impact analyses.
• Understanding of security baseline configurations, hardening, and compliance best practices.
• Strong analytical thinking, troubleshooting capabilities, and aptitude for Root Cause Analysis.
• Effective communication and management of stakeholder interactions.
• Experience coordinating with OEM or vendor support for technical issue resolution.
• Knowledge of enterprise monitoring, logging tools, and ticketing platforms.

Technical Preferences

• Expertise with Next-Generation Firewalls such as Palo Alto, Fortinet, Cisco Firepower, or Check Point.
• Proficiency with VPN technologies including IPSec and SSL VPN.
• Exposure to IDS/IPS, proxy, web security appliances, and secure remote access solutions.
• Familiarity with SIEM and log analysis tools like Microsoft Sentinel, Splunk, QRadar, and ArcSight.
• Comprehensive understanding of network protocols including TCP/IP, DNS, DHCP, BGP, OSPF, and basic routing methodologies.
• Basic administration skills for Windows and Linux operating systems.

Certifications (Preferred)

• Fortinet NSE or FCP certifications.
• Palo Alto Networks PCNSA or PCNSE certifications.
• Cisco CCNP Security or CCNA Security credentials.
• CompTIA Security+ qualification.
• ITIL Foundation certificate.
• Any other recognized cybersecurity certifications offer an advantage.